Legal
Privacy Policy
Last updated June 2026
What we collect
Account details (name, email, hashed password); stories, messages, photos and voice recordings you or your contributors add; shipping name, address and phone for printed books; and purchase records. We never see or store your full card number. Payments are handled by Stripe.
How we use it
To create, store and deliver your stories; to print and ship books; to send transactional emails (welcome, new memory added, order shipped); and to keep the service secure. We do not sell your personal data and we don't use your memories for advertising.
Who we share it with
Only the service providers needed to run the product: Stripe (payments), Lulu (printing & shipping, shipping details and book files only), our cloud hosting and storage providers, our email delivery provider, and an AI provider that processes story text to help draft your book.
Who can see your stories
Stories are private to the creator. Contributors can only add memories through the Surprise Link; they can't browse other contributions.
Retention & deletion
We keep your content while your account is active so your vault is preserved. Deleting your account permanently removes your stories, contributions and media. We may keep limited purchase records where the law requires it.
Your rights
You can access, download, correct or delete your data at any time from your Account page, or by emailing us. Depending on where you live (for example under GDPR or CCPA) you may have additional rights, which we will honour.
Children
Our service is not directed at children under 13, and we don't knowingly collect their personal data.
Cookies
We use a secure login cookie to keep you signed in. We don't use third-party advertising cookies.
Contact
Questions? Email hello@theplottwist.com.